Yeah they do, just probs some config is messed up. Getting it fixed will prevent browsers from saying your website is insecure. https://support.squarespace.com/hc/en-us/articles/205815898-Understanding-SSL-certificates